CorpLens AI Enterprise Edition is a next-generation, AI-driven Corporate Intelligence Operating System designed for Enterprise Risk Teams, Chief Information Security Officers (CISOs), M&A Advisors, Compliance Officers, and Procurement Leaders.
It continuously ingests, analyzes, and visualizes non-intrusive Open Source Intelligence (OSINT) to deliver real-time risk intelligence across Third-Party Risk Management (TPRM), Sanctions & Compliance, Cyber Threat Vulnerabilities (CVEs), Graph Relationship Topology, and Multi-Tier Supply Chain Dependencies.
Quick Start • Architecture • Enterprise Capabilities • API Docs • Documentation Index
- Deep-Dive Target Profiling: Comprehensive 7-axis intelligence suite covering Digital Footprint, Infrastructure, Web Stack, Regulatory Filings, News Sentiment, and Financial/ESG metrics.
- Lawful Passive OSINT: Operates 100% on passive public records (DNS A/MX/TXT, Certificate Transparency logs, HTTP headers, NVD feeds, and sanction lists).
-
Multi-Provider LLM Orchestrator: Supports Google Gemini, OpenAI GPT-4o, and self-hosted Ollama via unified fallback wrapper (
LLMProviderWrapper). -
Domain-Calibrated RAG: Context-retrieval engine (
RAGContextRetriever) with mandatory source attribution, confidence scoring ($0.94 - 0.99$ ), and automated executive summaries. -
Intent Classification: Auto-detects query intent across 7 specialized domains:
COMPARE,EXECUTIVE,CVE_THREAT,SANCTIONS,REPORT_GEN,SUPPLY_CHAIN, andRISK_EXPLAIN.
- Interactive Entity Visualizer: Real-time graph mapping connecting Companies, Parent Corporations, Subsidiaries, Board Executives, Web Domains, Shared Infrastructure, and CVE Vulnerabilities.
- Cypher Query Backend: High-performance Neo4j 5.18 graph database backend with Cytoscape.js browser-based canvas rendering.
Dynamically calculates composite risk scores (
- Infrastructure Risk: Open ports, SSL/TLS expiry, DNS configurations.
- Technology Risk: Outdated tech stacks, unpatched software.
- Reputation Risk: Regulatory actions, negative press sentiment, review scores.
- Business Risk: Financial stability, executive turnover, ownership changes.
- Operational Risk: Service outages, single-vendor lock-in.
- Supply Chain Risk: Multi-tier vendor concentration, 4th-party provider dependencies.
- Compliance Risk: OFAC, EU, UN, and UK HMT sanctions match confidence.
- Workflow Automation: Interactive lifecycle workflow (
Open→In Progress→Awaiting Approval→Closed). - Analyst Workspaces: Integrated task checklists, analyst note-taking, audit timelines, and PDF export bindings.
- ReportLab 4.5 Binary Engine: Generates compliance-ready
%PDF-1.4executive briefs with custom branding, metric tables, and risk breakdown charts. - Multi-Format Exports: One-click exports for PDF, DOCX, HTML, CSV, and JSON data formats.
CorpLens AI is architected following a highly resilient, cloud-native 3-Tier Decoupled Microservices Architecture:
graph TD
UI["🖥️ Presentation Layer (React 18 + TypeScript + Tailwind)"]
API["⚡ Business Logic Layer (FastAPI Microservices)"]
PG[("🐘 PostgreSQL 16 (Primary DB + RLS)")]
NEO[("🕸️ Neo4j 5.18 (Graph Topology)")]
REDIS[("⚡ Redis 7 (Caching & Queue)")]
AI["🧠 RAG AI Engine (Gemini / OpenAI / Ollama)"]
UI -->|HTTP REST / JSON| API
API --> PG
API --> NEO
API --> REDIS
API --> AI
┌─────────────────────────────────────────────────────────────────┐
│ Presentation Layer (React) │
│ React 18 · TypeScript 5 · Tailwind CSS · Cytoscape.js │
│ 18 Active Routes · Dark / Glassmorphism Enterprise Theme │
└────────────────────────────────┬────────────────────────────────┘
│ HTTP REST / JSON
▼
┌─────────────────────────────────────────────────────────────────┐
│ Business Logic Layer (FastAPI) │
│ 12 API Routers (companies, ai, cases, graph, reports, etc.) │
│ 8 Core Engine Services · Prometheus /metrics · RBAC Middleware│
└────────┬───────────────────────┬────────────────────────┬───────┘
▼ ▼ ▼
PostgreSQL 16 Neo4j 5.18 Redis 7
(Primary RDBMS + RLS) (Graph Topology) (Sub-ms Cache & Queue)
| Tier | Component | Technology | Version | Purpose |
|---|---|---|---|---|
| Frontend | SPA Engine | React | v18.2.0 |
High-performance user interface |
| Type Safety | TypeScript | v5.x |
Strict type definitions & safety | |
| Styling | Tailwind CSS | v3.x |
Modern enterprise design system | |
| Visualizations | Cytoscape.js / Recharts | v3.2 |
Entity topology & analytics charts | |
| Backend | REST Framework | FastAPI | v0.110.0 |
Asynchronous Python API server |
| Runtime | Python | 3.11 / 3.14 |
High-performance business logic | |
| ORM / Persistence | SQLAlchemy | v2.0 |
Async relational database ORM | |
| Databases | Relational DB | PostgreSQL | v16.0 |
Primary store with Row-Level Security |
| Graph DB | Neo4j | v5.18 |
Relationship & topology graph engine | |
| Caching / Queue | Redis | v7.0 |
Key-value cache & background queue | |
| AI / ML | LLM Framework | RAG Engine | Custom | Vector retriever, intent classification |
| PDF Engine | ReportLab | v4.5.1 |
Binary %PDF-1.4 report compiler |
|
| DevOps | Containerization | Docker / Compose | v24.0+ |
Multi-container orchestration |
| Kubernetes | K8s Manifests | 1.28+ |
Cloud-native deployment (k8s/) |
Run the following commands in your terminal:
# 1. Clone the repository
git clone https://github.com/corplens/corplens-ai.git
cd corplens-ai
# 2. Launch the 5-container Enterprise Stack
docker compose up -d| Service | Access URL | Credentials / Notes |
|---|---|---|
| Web Dashboard | http://localhost:5173 |
Public Access |
| Swagger API Docs | http://localhost:8000/docs |
OpenAPI 3.0 Interactive |
| ReDoc API Docs | http://localhost:8000/redoc |
Technical Reference |
| Prometheus Metrics | http://localhost:8000/metrics |
Observability Endpoint |
| Neo4j Browser | http://localhost:7474 |
neo4j / corplenspass |
| PostgreSQL DB | localhost:5432 |
postgres / postgrespassword |
CorpLens AI provides comprehensive, self-documenting REST APIs. Access live swagger UI at http://localhost:8000/docs.
GET /api/v1/companies List all monitored companies
GET /api/v1/companies/{id} Retrieve company intelligence profile
POST /api/v1/companies/scan Trigger real-time passive OSINT scan
POST /api/v1/ai/chat Interact with RAG AI Intelligence Copilot
GET /api/v1/cases List investigation cases
POST /api/v1/cases Create new investigation case
PATCH /api/v1/cases/{id}/status Update case status in Kanban workflow
GET /api/v1/graph/topology Fetch Cytoscape graph nodes & edges
GET /api/v1/reports/download/{id} Generate and download compliance PDF/DOCX report
GET /api/v1/cve/search Query CVE vulnerability database
GET /api/v1/admin/health/readiness System readiness check
GET /metrics Prometheus metrics endpoint
CorpLens AI is built with enterprise security controls:
- Row-Level Security (RLS): PostgreSQL policy enforcement ensuring tenant data isolation (
rls_policies.sql). - Role-Based Access Control (RBAC): Fine-grained permissions (
Admin,Analyst,Viewer,Auditor). - Authentication: JWT token refresh workflow & PBKDF2-SHA256 password hashing.
- Webhook Security: Cryptographic HMAC-SHA256 payload validation.
- Lawful OSINT Guarantee: Operating solely on non-intrusive public data records. No port scanners, penetration scripts, or private system intrusions.
The platform maintains strict automated test coverage across API services, database repositories, RAG pipelines, and report generation engines.
# Execute backend pytest suite
cd backend
pytest -v- Pytest Pass Rate:
22 / 22 Tests Passed (100% Success) - TypeScript Typecheck:
0 Errors (npx tsc --noEmit) - Vite Production Build:
Built cleanly in 8.29s - Docker Stack:
5/5 Containers Healthy
Detailed architectural blueprints and operating guides are available in the docs/ directory:
- 📖
docs/ARCHITECTURE_GUIDE.md— Comprehensive System Architecture & Component Guide - 📖
docs/API_DOCUMENTATION.md— Complete REST API Endpoint & Schema Reference - 📖
docs/DATABASE_DESIGN.md— Relational ER Diagram, Schemas & RLS Security Policies - 📖
docs/DEPLOYMENT_GUIDE_v3.md— Production Deployment, Docker & Kubernetes Guide - 📖
docs/SECURITY_REVIEW_v3.md— Security Audit & Hardening Matrix - 📖
docs/USER_GUIDE.md— User & Analyst Operational Walkthrough Guide - 📖
docs/PERFORMANCE_SUMMARY_v3.md— Caching & Sub-second Performance Report - 📖
docs/TESTING_SUMMARY.md— Automated Test Suite & Coverage Report - 📖
CONTRIBUTING.md— Developer Onboarding & Contribution Guidelines - 📖
CHANGELOG.md— Version Release History
Copyright © 2026 CorpLens AI Engineering Team. All Rights Reserved.
Lawful OSINT Compliance Disclaimer: CorpLens AI operates strictly on non-intrusive, publicly accessible data sources (DNS records, SSL/TLS transparency logs, HTTP response headers, public CVE feeds, regulatory registries). The platform does not execute active penetration testing, port scans, or access private systems.